A browser page and a zero-dependency Node tool that put a build inside a PNG, seal it, print the seal on the card, and read cards back — including stripped copies, matched against a deck kept in the visitor's own browser. One optional feature, the studio's generator, sends the visitor's own prompt with the visitor's own Anthropic key straight from their browser to Anthropic's API and shows the single-file app it writes. The page has no server and collects nothing.
Runs as a vendor's SaaS · AI: generative · map as of 2026-09-30 · law checked 2026-09-30
transparency duties (Art 50)
Role: deployer (Art 3(4)) — it uses an AI system under its authority.
Not engaged
No personal data is processed, so no GDPR / UK GDPR duty arises from the build.
5 apply · 5 in force
Nothing further scheduled.
| Duty | On this stack | When |
|---|---|---|
| A UK company is in scope when its AI output is used in the EU EU AI Act · Art 2(1)(c) the text“providers and deployers of AI systems that have their place of establishment or are located in a third country, where the output produced by the AI system is used in the Union” — source, checked 2026-09-29 | applies as written Same. | in force |
| Building an AI system for your own use makes you its provider EU AI Act · Art 3(3) and 3(11) the text“‘putting into service’ means the supply of an AI system for first use directly to the deployer or for own use in the Union for its intended purpose” — source, checked 2026-09-29 | shared with the vendor A seat product (Copilot, ChatGPT, Claude): the vendor is the provider of its assistant; the company is the deployer. | in force |
| AI literacy EU AI Act · Art 4 (as replaced by Reg 2026/1744) the text“Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf” — source, checked 2026-09-29 | applies as written Same duty. | in force |
| Mark AI-generated audio, image, video or text as artificially generated, in a machine-readable format EU AI Act · Art 50(2); Art 111(4) as added by Reg 2026/1744 the text“Providers of AI systems, including general-purpose AI systems, generating synthetic audio, image, video or text content, shall ensure that the outputs of the AI system are marked in a machine-readable format and detectable as artificially generated or manipulated.” — source, checked 2026-09-30 | this stack removes it The vendor, as provider, carries the marking duty for its outputs; the company does not strip the mark. | in force |
| Fines EU AI Act · Art 99(3), 99(4) the text“up to EUR 15 000 000 or, if the offender is an undertaking, up to 3 % of its total worldwide annual turnover for the preceding financial year, whichever is higher” — source, checked 2026-09-29 | applies as written Same. | in force |
| From | What applies | Where it says so |
|---|---|---|
| 2025-02-02 | AI Act Chapters I and II apply — including Article 4 (AI literacy) and the Article 5 prohibitions | Art 113, third para, point (a) |
| 2026-02-05 | UK: Data (Use and Access) Act 2025 data protection provisions in force — including section 80 (new Articles 22A–22D on automated decision-making) and section 85 / Schedule 7 (international transfers) | SI 2026/82, reg 2(j), (m), (z9) |
| 2026-07-27 | Digital Omnibus on AI (Regulation (EU) 2026/1744) in force | Reg 2026/1744, Art 4 |
| 2026-08-02 | AI Act general date of application — including Article 50 transparency | Art 113, second para |
| 2026-12-02 | AI Act Article 50(2) marking for generative systems already on the market before 2 August 2026; and the new Article 5(1) points (ba) and (bb) | Art 111(4) and Art 113, third para, point (a), as amended by Reg 2026/1744 |
| 2027-12-02 | AI Act high-risk obligations (Chapter III, Sections 1–3) for Annex III systems — moved from 2 August 2026 by the Digital Omnibus | Art 113, third para, point (c)(i), as replaced by Reg 2026/1744 |
| 2028-08-02 | AI Act high-risk obligations for Annex I (product-safety) systems | Art 113, third para, point (c)(ii), as replaced by Reg 2026/1744 |